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This listing of claims will replace all prior versions, and listings, of claims in the application. 
Listing of Claims: 

1 . (currently amended) An apparatus for collecting and transmitting biometric data over a 
network, the apparatus comprised of: 

a sensor to collect biometric data; 

a biometric template generator, coupled to the sensor, to convert the biometric data into a 
biometric template; 

a security code generator coupled to the sensor to sign the biometric data with a signature 
corresponding to the sensor; [[and]] 

an encryptor coupled to the security code generator to encrypt the signed biometric data; 

and 

a security module to decrypt the signed biometric data and to use the signature 
corresponding to the sensor to authenticate the sensor by determining whether the sensor is an 
authorized sensor . 

2. (original) The apparatus of claim 1, further comprising an output interface, coupled to the 
biometric template generator, to output the biometric template to a network. 

3. (canceled) 

4. (previously presented) The apparatus of claim 1, wherein the security code generator 
implements a signing technique using at least one of a key and a token. 

5. (previously presented) The apparatus of claim 1, further comprising an output interface, 
coupled to the biometric template generator, to output the signed biometric template to a 
network. 
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6. (original) The apparatus of claim 1, further comprising an image processor coupled between 
the sensor and the biometric template generator to determine whether the biometric data is 
suitable for biometric template generation. 

7. (original) The apparatus of claim 1, further comprising a biometric matcher to compare a two 
biometric templates to determine whether the two biometric templates match and to generate a 
match result. 

8. (original) The apparatus of claim 7, wherein the match result is signed. 

9. (canceled) 

10. (original) The apparatus of claim 9, wherein the received previously enrolled biometric 
template is signed, encrypted, and comprises a validation key. 

1 1 . (currently amended) A cryptographic system, comprising: 

an imaging device for collecting biometric data; 

a code generator to generate a digital signature corresponding to the imaging device; 

a key generator to generate at least one key; 

a private key storage device coupled to the key generator; 

a public key storage device coupled to the key generator; 

a signature validator to generate a public key; [[and]] 

an encryptor to encrypt signed data using the public key ; and 

a security module to decrypt the signed data and to use the signature corresponding to the 
imaging device to authenticate the imaging device by determining whether the imaging device is 
an authorized imaging device . 



12. (canceled) 
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13. (original) The system of claim 1 1, wherein the key generator comprises logic to create an 
asymmetric key pair. 

14. (currently amended) A method of providing security to biometric data, comprising: 

generating a key pair comprising an imaging device public key and an imaging device 
private key at an imaging device; 

storing the imaging device private key in a storage device at the imaging device; 

transmitting the imaging device public key from the imaging device to a certification 
authority; 

generating an imaging device public key certificate at the certification authority; 
generating a certification authority public key certificate at the certification authority; 
transmitting the imaging device public key certificate and the certification authority 
public key certificate to the imaging device; 

signing the biometric data with the imaging device private key; [[and]] 
encrypting the signed biometric data; 
decrypting the signed biometric data; and 

using the imaging device private key to authenticate the imaging device by determining 
whether the imaging device is an authorized imaging device . 

15. (original) The method of claim 14, further comprising storing the imaging device public key 
certificate and the certification authority public key certificate in the storage device at the 
imaging device. 

16. (previously presented) The method of claim 14, further comprising: 

generating an asymmetric key pair comprising a server public key and a server private 
key at a server; 

storing the server private key in a storage device at the server; 
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transmitting the server public key from the server to a certification authority; 
generating a server public key certificate at the certification authority; 
generating a second certification authority public key certificate at the certification 
authority; and 

transmitting the server public key certificate and the second certification authority public 
key certificate to the imaging device. 

17. (previously presented) A method of exchanging biometric information between an imaging 
device and a server, comprising: 

authenticating the server at the imaging device; 
obtaining a biometric sample at the imaging device; 

signing the biometric sample at the imaging device with a signature corresponding to the 
imaging device; 

generating a signed data package comprising the biometric sample, a token, the 
signature, and an imaging device public key certificate; 

encrypting the signed data package using the server public key certificate; 
transmitting the encrypted signed data package to the server; 
receiving the encrypted signed data package at the server; 
decrypting the data package at the server; 
authenticating the imaging device at the server; and 
validating the signature and the token at the server. 

18. (original) The method of claim 17, wherein authenticating the server at the imaging device 
comprises: 

sending a request for a server public key certificate and the token from the imaging 
device to the server; 

generating the token at the server; 

retrieving the server public key certificate from a storage device; 
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transmitting the server public key certificate and the token to the imaging device; and 
validating the server public key certificate at the imaging device. 

19. (original) The method of claim 18, wherein validating the server public key certificate at the 
imaging device comprises using a certification authority public key certificate. 

20. (canceled) 
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